This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA31B2AADB2B11F0AB237590DAE4EC9C.roa
File:                     FA31B2AADB2B11F0AB237590DAE4EC9C.roa (raw, json)
Hash identifier:          6aUZOGJLZ8l6EzMqFq5edjXwQAWAlgJuvrJ/27ipuXg=
Subject key identifier:   3C:FE:59:69:0D:65:D5:E8:2C:35:5C:33:D9:6D:C2:F1:68:C7:D5:14
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA31B2AADB2B11F0AB237590DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 09:37:18 +0000
ROA not before:           Wed 17 Dec 2025 09:37:13 +0000
ROA not after:            Sat 24 Jan 2026 09:37:13 +0000
asID:                     984
IP address blocks:        45.195.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102212 (0x18f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 09:37:13 2025 GMT
            Not After : Jan 24 09:37:13 2026 GMT
        Subject: CN=694279ce-114d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:ab:77:28:f2:7c:84:79:12:9a:9a:e0:b9:
                    d1:0c:25:34:2c:3d:4f:80:89:a9:b6:17:36:be:2f:
                    b1:c5:3c:ac:9d:ab:fe:18:cc:1f:2b:62:92:42:e5:
                    80:71:a6:f0:6a:97:4d:6d:f2:f2:69:7d:29:fb:33:
                    9e:46:a0:c8:7a:dc:71:e2:25:26:84:2a:77:ae:3b:
                    08:99:58:26:24:ec:cd:60:c1:07:c6:81:b1:04:e9:
                    b2:e7:60:dd:8a:5d:5c:bd:47:8f:20:9a:97:5f:de:
                    56:bf:10:25:ea:2b:4b:fe:c6:2e:9a:96:25:dd:01:
                    1a:87:74:9c:51:13:4f:97:05:2a:3d:9a:fc:5f:50:
                    09:d9:fa:2c:a6:28:eb:52:81:19:37:8e:26:e9:60:
                    34:ed:28:7b:49:f1:9d:bc:16:3d:d3:71:fe:a6:fc:
                    fd:73:b3:4e:67:8a:d0:aa:3d:2a:96:ba:a8:3b:d7:
                    9e:c0:79:6d:1a:54:8a:61:f3:9e:c1:9f:1d:bc:f0:
                    36:d7:4e:01:6c:89:03:ae:3f:9b:ae:8f:dc:ee:5c:
                    e4:14:c6:5b:75:05:41:4a:e5:d7:bd:ea:87:91:12:
                    4f:d6:2e:0f:fd:08:cb:7c:90:1d:6f:5e:57:d8:3e:
                    c4:87:f1:1f:1f:c0:71:5c:86:71:0c:6f:af:f1:60:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:59:69:0D:65:D5:E8:2C:35:5C:33:D9:6D:C2:F1:68:C7:D5:14
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA31B2AADB2B11F0AB237590DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:56:10:25:76:1a:18:ba:eb:ce:bf:5b:39:fc:ba:f1:6c:8b:
         98:74:26:e6:49:8e:04:bd:02:1e:04:e4:6f:ec:d4:50:3c:52:
         4e:f0:cd:25:e4:89:e8:3b:d7:3a:d4:3c:0b:9b:e0:59:e4:59:
         c0:bc:86:bc:6e:ce:37:96:a0:4d:ac:45:af:51:e0:97:60:b0:
         02:de:28:c5:af:ee:e6:b5:c0:96:88:c4:f6:cb:88:a9:2a:40:
         19:6b:5d:66:e1:42:a0:8e:17:58:06:13:c2:96:d6:3e:35:70:
         8b:1d:fd:75:7c:ee:ff:ca:64:c6:dd:54:2b:4e:0d:7d:82:74:
         ae:fb:ca:7f:08:94:3b:dc:73:b7:a8:b0:72:01:df:82:3f:f0:
         12:2a:ef:22:b6:5f:22:c9:0d:54:71:e1:35:0f:f0:3d:08:e6:
         2c:ed:a7:4d:5d:7f:69:c4:db:89:5f:c4:5b:96:80:77:61:53:
         a7:a3:39:e7:bd:7b:7a:70:a2:a5:57:fa:99:8a:36:bf:3b:a0:
         51:86:f6:17:6f:c7:71:93:c4:1a:24:79:67:86:a1:dd:f1:02:
         a9:b2:0a:5f:54:b5:72:ba:e8:8c:92:7d:06:92:85:9a:62:1c:
         dd:08:e7:63:b6:c8:12:5d:e4:0f:7e:b0:45:ee:aa:67:13:a1:
         80:d5:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:08 2025 by rpki-client